Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa
File: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (raw, json)
Hash identifier: 5z/9B2lDD9Y2z6ddTWA/M1t9+scwLoPNHb2Cu/S9FHo=
Subject key identifier: E4:DB:66:0A:15:20:C5:A8:43:C8:40:C4:CD:FC:13:46:38:A6:F7:D8
Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial: 76CDDB1EBD0FD48E26E4B2A2D248DBC07774C758
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa
Signing time: Wed 06 Nov 2024 14:56:06 +0000
ROA not before: Wed 06 Nov 2024 14:51:06 +0000
ROA not after: Wed 05 Nov 2025 14:56:06 +0000
asID: 274640
IP address blocks: 2804:916c::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:cd:db:1e:bd:0f:d4:8e:26:e4:b2:a2:d2:48:db:c0:77:74:c7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Validity
Not Before: Nov 6 14:51:06 2024 GMT
Not After : Nov 5 14:56:06 2025 GMT
Subject: CN=E4DB660A1520C5A843C840C4CDFC134638A6F7D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:b3:17:f9:f7:0c:4c:61:b4:b3:d2:40:dc:
bc:32:66:4f:99:dc:7f:66:a0:50:18:5d:94:17:73:
89:56:bc:c0:83:cc:08:95:2d:ec:12:3d:fe:06:9a:
d8:c8:62:d1:69:fd:41:a9:7d:72:c7:9e:b7:71:68:
c9:f6:e0:d5:83:8d:92:a9:43:53:11:d9:67:7c:4f:
99:2d:0d:e9:7a:b6:09:1a:0d:d2:1c:4e:7f:f8:45:
a7:94:40:d3:6a:a0:1c:f9:78:31:f5:76:25:4a:01:
61:25:7b:de:63:b8:d7:d4:1c:ea:4d:49:99:ca:dc:
16:5b:84:e0:11:42:4c:e7:0c:cb:54:24:5a:93:4d:
57:bd:f1:30:69:95:bc:cd:00:fd:8b:c3:69:a5:71:
13:b1:ba:b5:5f:3d:ca:af:9d:d7:ab:de:38:ae:30:
de:09:ae:f2:ee:72:e0:43:12:69:ab:2d:20:d2:7d:
7a:65:4c:73:bc:6f:62:5c:66:49:3d:e5:5b:85:e8:
21:24:e6:1d:37:fe:9d:63:28:97:70:e2:09:08:1e:
09:d9:62:75:0f:93:f9:71:09:af:0b:0a:58:5a:9a:
ba:26:07:f5:49:a2:41:aa:3e:d1:37:24:91:e9:c5:
e4:98:33:b9:6c:5a:a2:89:3c:13:ff:4d:19:3d:4d:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DB:66:0A:15:20:C5:A8:43:C8:40:C4:CD:FC:13:46:38:A6:F7:D8
X509v3 Authority Key Identifier:
keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:916c::/32
Signature Algorithm: sha256WithRSAEncryption
ca:c0:de:2b:f7:a0:68:9e:44:69:72:c5:c3:dd:b2:dd:d0:47:
c2:24:2b:73:11:a4:6b:aa:73:ee:2f:db:6f:1b:75:3b:b9:2b:
45:e1:f2:6c:9a:6a:df:0b:1e:82:36:4a:3f:f3:e3:5d:ef:11:
fa:e2:1a:be:0a:92:98:e8:8b:16:a2:c8:e4:28:9e:8d:51:ec:
47:ac:c2:76:76:a2:21:09:87:76:6f:73:d1:2d:1d:cf:6e:fd:
1d:f5:d3:19:15:43:aa:58:7c:22:45:99:8e:0f:1e:da:1c:89:
1f:51:58:70:46:61:68:1c:b2:46:da:b0:4c:81:c6:37:c8:ff:
85:95:3e:ed:62:26:d5:53:a1:d9:51:2b:a9:bf:c0:10:24:89:
15:c6:40:45:29:8a:61:3d:43:79:93:6b:b8:f3:b4:d6:5f:b3:
f0:b1:51:89:23:de:a8:d2:fe:f1:a1:78:dd:c0:0d:68:b9:d2:
65:76:65:19:f9:4c:18:81:1e:2b:d9:e1:9d:ab:de:f1:00:7f:
0a:3b:0a:3f:d7:45:46:04:3e:b1:1d:80:ff:cb:61:15:6e:ac:
3a:ae:6d:83:db:9f:e1:fc:86:d7:0d:18:a1:c7:3d:b5:99:41:
3d:3d:a1:73:e7:d4:cb:34:8c:72:42:ab:c7:3f:34:19:1c:2b:
50:18:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:45:10 2025 by rpki-client